# Server-side Attacks

* [Server-Side Request Forgery (SSRF)](https://estebanzarate.gitbook.io/hackache/hack-the-box/academy/server-side-attacks/server-side-request-forgery-ssrf)
* Server-Side Template Injection (SSTI)
* <https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server-side_Template_Injection>
* Server-Side Includes (SSI) Injection
* <https://owasp.org/www-community/attacks/Server-Side_Includes_(SSI)_Injection>
* XSLT Server-Side Injection
